CVE Database›CVE-2025-70103

CVE-2025-70103

libjxl: libjxl: Arbitrary code execution via crafted PBM images

Loading…

Severity

Important

Red Hat Product Security

7.6

CVSS 3.1

Review impact separately from score.

Published · May 27, 2026

Updated · August 10, 2026

Description

A flaw was found in libjxl, an image processing library. This heap buffer overflow vulnerability could potentially allow a remote attacker to cause a denial of service. The flaw occurs when processing specially crafted PBM (Portable Bitmap) images, primarily impacting applications that handle untrusted image content.

Statement

This Important heap buffer overflow in libjxl occurs when processing specially crafted PBM images. The vulnerability primarily impacts applications that handle untrusted image content, requiring user interaction to trigger the flaw. This is considered Important due to the potential for denial of service, even with user interaction.

CVSS score applicability

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation

No mitigation is specified in collected source.

CVSS / CWE

CVSS 3.1 · 7.6
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:L/I:L/A:H

CWE-122 · Heap-based Buffer Overflow